The SQL comment syntax used to ignore the rest of the original, legitimate query so it doesn't cause a syntax error. 🛠️ Secure Implementation Example (Node.js/pg)
To protect a PostgreSQL-backed application from injection, you must move away from building queries with string concatenation.
The input provided ( SELECT PG_SLEEP(5)-- ) is a classic payload used to test for vulnerabilities in PostgreSQL databases.
The SQL comment syntax used to ignore the rest of the original, legitimate query so it doesn't cause a syntax error. 🛠️ Secure Implementation Example (Node.js/pg)
To protect a PostgreSQL-backed application from injection, you must move away from building queries with string concatenation.
The input provided ( SELECT PG_SLEEP(5)-- ) is a classic payload used to test for vulnerabilities in PostgreSQL databases.